Privacy policy
We are totally committed to protecting the privacy of our site visitors and customers and to promoting the responsible consumption of alcohol. It’s that simple. That means we will not disclose information about our customers to third parties except where it is part of providing a service to you - e.g. arranging for a product to be sent to you, carrying out credit and other security checks and to help us to understand the wines and other services we can best provide you. We never sell your data to third parties. Ever.
We may update this policy from time to time to take account of any new business activity or to reflect any changes in law or best practice in relation to data protection. We will notify you if we do so. This policy was last updated on 27 April 2018.
If you have any questions regarding our privacy policy, please email us at info@honestgrapes.co.uk or call 020 3603 1646.
Why do we collect your personal data?
We collect, use and store your personal data so that we can offer you the products and services you expect from us. We collect your personal data for three main reasons:
- To process and deliver your orders
- To personalise, report on and improve the products and services we provide
- To send you our latest news and wine offers via email, telephone or post based on your mailing preference
How do we collect your personal data?
When you create a customer account, visit our website, sign up to our mailing list, communicate with us or purchase our products or services, you may choose to give us certain information. For example, when you give us your name and address, tell us about your wine preference or when you purchase wine from us. It allows us to keep track of your preference, so we know when to communicate and when not to communicate with you. We also use information to make sure that you are receiving information in a relevant and timely manner.
What categories of personal data do we collect?
We may collect the following information about you:
- Your name, email address, phone number and address including postcode
- Purchases and orders made by you
- Payment methods (note that we do not store your payment information details. These are held by secure payment providers)
- When you set up an account, your password and your mailing preference
- Your wine preference through our fun wine quiz
- Your IP address and online browsing history on our website
- Your correspondence with us via email, webchat, telephone or post
Personal data we will process to fulfil your orders
We will need to process your personal data to fulfil any order you place and to comply with the law. For example:
We will share your name, address and, where applicable, telephone number with our fulfilment agents. We will share your payment details with our bank or clearing house so that we can process payment for your order. We will share your name, address and telephone numbers with an external provider to verify your age when you first purchase from us. This is because we are required by law to ensure that we sell products containing alcohol only to people aged 18 or over.
How we use and/or process your personal data
Our web server automatically recognises your domain name when you visit our web site. We also collect the email addresses of people who communicate with us via email and aggregate information on user visits. Information volunteered such as survey information and/or site registrations is also collected. The information we collect is used primarily for internal review and to improve the content of our services and offerings. It is also used to notify users about updates to our services. We do not sell your information with other organisations for commercial purposes.
To make our messages to you more relevant, we may use your personal information to create a profile of your interests and preference or to present you with personalised offers on our website, through social media channels such as Facebook and/or by placing banner advertisements on third party websites. This means we could use pieces of information you’ve either given us directly or your behaviour to create a profile. This not only gives us an idea of who our customers are, but also helps to make sure that when we get in touch with you, it is done in a way which is relevant and tailored to your preferences.
When you consent to marketing cookies, we use the Meta Pixel to share information about your interactions with our site (including pages visited, items purchased, and certain identifiers such as your email address, phone number, postcode, and date of birth) with Meta Platforms Ireland Ltd. This information is hashed before transmission and used to match you to your Facebook or Instagram account for the purposes of personalised advertising and measuring our marketing effectiveness. Meta may transfer this data outside the EEA, including to the United States, using approved legal safeguards. You can at any time
The Meta pixel (formerly the Facebook pixel) is provided by Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland ("Meta").
Meta's Privacy Policy for the processing of personal data in connection with Meta pixels can be found here: https://www.facebook.com/about/privacy/
You can also find out more about Facebook's policies here: https://transparency.meta.com/en-gb/
Please note that we may occasionally commission insight companies or use industry-standard profiling products offered by third parties to help us do this. This enables us to maximise the use of our marketing budget, so we’re able to offer our wine at the best price to our customers. We shall always ensure that any activity is implemented in a fair and balanced way. It is your right to opt out of your information being used for profiling, and there is information on how to do this below.
If you registered your email with us on an occasion such as, but not limited to, making a purchase, registering on our site or entering a social media or email competition, we may update you on our latest products, news and special offers via email, post & telephone with your consent. We will not sell, or make available, your name, address, email address or any other personal information to any third party (excluding partners from whom you may have linked to our site) without your permission. Our business is the business of selling and marketing wine, not people’s information.
How to unsubscribe from us
You have the right to opt out of receiving communications from us at any time. In each email we sent to you for marketing purposes, there will be a specific link for you to click on to unsubscribe or you can do so by updating your mailing preference. Alternatively, you can contact us at info@honestgrapes.co.uk or call 020 3603 1646.
Cookies
A cookie is a small information file that is sent to your computer and is stored on your hard drive. If you have registered with us then your computer will store an identifying cookie which will save you time each time you re-visit our website, by remembering your personal details. You can change the settings on your browser to prevent cookies being stored on your computer without your explicit consent. To access your account details or place an order online you will still need to log in.
Please click here for our cookie policy.
Storage methods and duration
Honest Grapes may store your information in its secured off-site databases through third-party providers. We will not keep your personal data for longer than is necessary for the purposes described in this policy. We will keep personal data while your account is active. The information may be retained and used by Honest Grapes for a reasonable period, reflecting our need to meet any legal or regulatory requirements, or to resolve a legal dispute. We may also keep different types of personal data for different lengths of time (for instances, we may need to keep certain personal data relating to your purchases in order to comply with HMRC’s VAT reporting requirements). This means we may retain information after an individual ceases to use Honest Grapes services or after the individual has ceased interacting with Honest Grapes. Except where the law, authorities or regulatory bodies require us to retain it for longer, we retain browsing history for a reasonable period after it was generated.
Protecting your security
We may use personal information provided by you in order to conduct appropriate anti-fraud checks. Personal information that you provide may be disclosed to a credit reference or fraud prevention agency, which may keep a record of that information. This is done only to confirm your identity - a credit check is not performed and your credit rating is unaffected.
Transfers of your personal data
The information that we collect from you may be transferred to, and stored at, a destination outside the European Economic Area ("EEA"). It may also be processed by staff operating outside the EEA who work for us or one of our suppliers. Such processing may, for example, be required in order to fulfil your order, process your payment details or provide support services.
We can’t guarantee the security of transmission of information via the Internet. We will do our best to protect your personal data, but cannot guarantee the security of data transmitted to our site; any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access.
Disclosures of your personal data
We do not disclose information to third parties outside Honest Grapes, except under the following circumstances:
- in the event that Honest Grapes sells or buys any business or assets;
- if Honest Grapes or substantially all of its assets are acquired by a third party, in which case personal data which we hold about our customers may be one of the transferred assets; or
- if we are under a duty to disclose or share your personal data in order to comply with any legal obligation, or in order to enforce or apply our terms of; or to protect the rights, property, or safety of Honest Grapes, our customers, or others. This includes exchanging information with other companies and organisations for the purposes of fraud protection and credit risk reduction.
Third-party sites
Our site may contain links to and from the websites of our partner networks, advertisers and other third parties. If you follow a link to any of these websites, please note that they have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check their policies before you submit any personal data.
Age verification
We are committed to being a responsible supplier of alcohol and promote a responsible attitude to drinking. We may use personal information provided by you in order to conduct appropriate age verification checks. Personal information that you provide may be disclosed to an age verification agency, which may keep a record of that information. This is done only to confirm your age.
Checking your Details
If you wish to verify the details you have submitted to us you may do so by contacting us via the email address or address given below. Our security procedures mean that we may request proof of identity before we reveal information. This proof of identity will take the form of your email address and password submitted upon registration. You must therefore keep this information safe as you will be responsible for any action which we take in response to a request from someone using your email and password. We would strongly recommend that you do not use the browser's password memory function as that would permit other people using your terminal to access your personal information.
Knowing your rights
You have a number of rights under data protection laws; these are listed below:
- The right to be informed
- The right of access
- The right to rectification
- The right to erasure
- The right to restrict processing
- The right to transfer your personal data (portability)
- The right to object
You have the right to access, modify and delete the personal information that we hold about you. If you would like a copy of some or all of your personal information, please let us know by emailing us at info@honestgrapes.co.uk or call 020 3603 1646.
Cookies
Cookies are small text files that are placed on your computer by websites that you visit. They are widely used in order to make websites work, or work more efficiently, as well as to provide information to the owners of the site. We use cookies for the following purposes:
Strictly necessary cookies
These cookies are required for the website to run and cannot be switched off. Such cookies are only set in response to actions made by you such as language, currency, login session, privacy preferences. You can set your browser to block these cookies but this might affect the way our site is working.
| Name | Description | Category | Provider | Duration |
|---|---|---|---|---|
| _orig_referrer | Allows merchant to identify where people are visiting them from. | Necessary | Shopify | 2 weeks |
| _landing_page | Capture the landing page of visitor when they come from other sites. | Necessary | Shopify | 2 weeks |
| _ab | Used to control when the admin bar is shown on the storefront. | Necessary | Shopify | 1 year |
| _secure_session_id | This cookie is generally provided by Shopify and is used to track a user's session through the multi-step checkout process and keep their order, payment and shipping details connected. | Necessary | Shopify | 1 day |
| cart | Contains information related to the user's cart. | Necessary | Shopify | 2 weeks |
| cart_sig | This cookie is generally provided by Shopify and is used in connection with checkout. It is used to verify the integrity of the cart and to ensure performance of some cart operations. | Necessary | Shopify | 2 weeks |
| cart_ts | This cookie is generally provided by Shopify and is used in connection with checkout. | Necessary | Shopify | 2 weeks |
| cart_ver | This cookie is generally provided by Shopify and is used in connection with the shopping cart. | Necessary | Shopify | 2 weeks |
| cart_currency | Used after a checkout is completed to initialize a new empty cart with the same currency as the one just used. | Necessary | Shopify | 2 weeks |
| checkout_token | Used by checkout to identify the user. | Necessary | Shopify | Session |
| Secure_customer_sig | unknown | Necessary | Not available | unknown |
| storefront_digest | Stores a digest of the storefront password, allowing merchants to preview their storefront while it's password protected. | Necessary | Shopify | 1 year |
| cookieconsent_status | This cookie is associated with the app Consentmo GDPR Compliance and is used for storing the customer's consent. | Necessary | Consentmo | 1 year |
| cookieconsent_preferences_disabled | This cookie is associated with the app Consentmo GDPR Compliance and is used for storing the customer's consent. | Necessary | Consentmo | 1 day |
| _shopify_m | This cookie is generally provided by Shopify and is used for managing customer privacy settings. | Necessary | Shopify | 1 year |
| _shopify_tm | This cookie is generally provided by Shopify and is used for managing customer privacy settings. | Necessary | Shopify | 30 minutes |
| _shopify_tw | This cookie is generally provided by Shopify and is used for managing customer privacy settings. | Necessary | Shopify | 2 weeks |
| _tracking_consent | Used to store a user's preferences if a merchant has set up privacy rules in the visitor's region. | Necessary | Shopify | 1 year |
| tracked_start_checkout | This cookie is generally provided by Shopify and is used in connection with checkout. | Necessary | Shopify | 1 year |
| identity_state | This cookie is generally provided by Shopify and is used in connection with customer authentication. | Necessary | Not available | 1 day |
| identity_customer_account_number | Stores an identifier used to facilitate login across the customer's account and storefront domains. | Necessary | Shopify | 12 weeks |
| __kla_id | unknown | Necessary | Not available | unknown |
| _cmp_a | Used to manage customer privacy settings. | Necessary | Shopify | 1 day |
| localization | Used to localize the cart to the correct country. | Necessary | Shopify | 2 weeks |
| _customer_account_shop_sessions | Used in combination with the _secure_account_session_id cookie to track user sessions for new customer accounts. | Necessary | Shopify | 30 days |
| _secure_account_session_id | Used to track user sessions for new customer accounts. | Necessary | Shopify | 30 days |
| _shopify_country | Used for Plus shops where pricing currency/country is set from GeoIP by helping avoid GeoIP lookups after the first request. | Necessary | Shopify | 30 minutes |
| _storefront_u | Used to facilitate updating customer account information. | Necessary | Shopify | 1 minute |
| c | Used in connection with checkout. | Necessary | Shopify | 1y |
| checkout | Used by checkout to identify the user. | Necessary | Shopify | 21 days |
| customer_account_locale | Used to keep track of a customer account locale when a redirection occurs from checkout or the storefront to customer accounts. | Necessary | Shopify | 1 year |
| dynamic_checkout_shown_on_cart | Used in connection with payments. | Necessary | Shopify | 30 minutes |
| hide_shopify_pay_for_checkout | Set when a buyer dismisses the Shop Pay login modal during checkout, informing display to buyer. | Necessary | Shopify | Session |
| keep_alive | Used when international domain redirection is enabled to determine if a request is the first one of a session. | Necessary | Shopify | Session |
| master_device_id | Merchant authentication: Permanent device identifier, public version. | Necessary | Shopify | 1 year |
| previous_step | Used in connection with payments. | Necessary | Shopify | 1 year |
| discount_code | Stores a discount code (received from an online store visit with a URL parameter) in order to the next checkout. | Necessary | Shopify | Session |
| remember_me | Used in connection with payments. | Necessary | Shopify | 1 year |
| secure_customer_sig | This cookie is generally provided by Shopify and is used in connection with a customer login. | Necessary | Shopify | 1 year |
| shopify_pay | Used to log in a buyer into Shop Pay when they come back to checkout on the same store. | Necessary | Shopify | 1 year |
| shopify_pay_redirect | Used to accelerate the checkout process when the buyer has a Shop Pay account. | Necessary | Shopify | 1 year |
| shop_pay_accelerated | Indicates if a buyer is eligible for Shop Pay accelerated checkout. | Necessary | Shopify | 1 year |
| source_name | Used in combination with mobile apps to provide personalized checkout behavior when browsing a compatible mobile app store. | Necessary | Shopify | Session |
| checkout_session_lookup | Used in connection with payments. | Necessary | Shopify | 3 weeks |
| checkout_prefill | Used in connection with payments. | Necessary | Shopify | 5 minutes |
| checkout_queue_token | Used in connection with payments. | Necessary | Shopify | 1 year |
| checkout_queue_checkout_token | Used in connection with payments. | Necessary | Shopify | 1 year |
| checkout_worker_session | Used in connection with payments. | Necessary | Shopify | 3 days |
| checkout_session_token | Used in connection with payments. | Necessary | Shopify | 3 weeks |
| checkout_session_token_<<token>> | Used in connection with checkout. | Necessary | Shopify | 3w |
| cookietest | Use it to make sure our systems are working properly. | Necessary | Shopify | 1 minute |
| order | Used to allow access to the data of the order details page of the buyer. | Necessary | Shopify | 3 weeks |
| identity-state | Stores a hash of the oauth flow state between redirects. | Necessary | Shopify | 1 day |
| identity-state-<<token>> | Used in connection with customer authentication | Necessary | Shopify | 24h |
| card_update_verification_id | Used in connection with payments. | Necessary | Shopify | 1 day |
| customer_account_new_login | It is used in connection with user identification. | Necessary | Shopify | 20 minutes |
| customer_account_preview | It is used in connection with user identification. | Necessary | Shopify | 7 days |
| customer_payment_method | Used in connection with payments. | Necessary | Shopify | 60 minutes |
| customer_shop_pay_agreement | Used in connection with payments. | Necessary | Shopify | 1 minute |
| pay_update_intent_id | Used in connection with payments. | Necessary | Shopify | 20 minutes |
| profile_preview_token | Used for previewing checkout customizations. | Necessary | Shopify | 5 minutes |
| login_with_shop_finalize | Used to facilitate login with Shop. | Necessary | Shopify | 5 minutes |
| preview_theme | It is used in conjunction with the theme editor. | Necessary | Shopify | Session |
| shopify-editor-unconfirmed-settings | It is used in conjunction with the theme editor. | Necessary | Shopify | 1 day |
| wpm-test-cookie | Use it to make sure our systems are working properly | Necessary | Shopify | Session |
| _shop_app_essential | Contains essential information for the correct functionality of Shop.app. | Necessary | Shopify | 1 year |
| _shopify_essential | Contains essential information for the correct functionality of a store such as session and checkout information and anti-tampering data. | Necessary | Shopify | 1 year |
| cookieconsent_status1 | Tracks consent to use of cookies | Necessary | Consentmo | 1 year |
| _s | This cookie is associated with Shopify's analytics suite. | Statistics | Shopify | 30 minutes |
| _shopify_d | unknown | Statistics | Not available | unknown |
| _shopify_fs | This cookie is associated with Shopify's analytics suite. | Statistics | Shopify | 30 minutes |
| _shopify_s | Used to identify a given browser session/shop combination. Duration is 30 minute rolling expiry of last use. | Statistics | Shopify | 30 minutes |
| _shopify_sa_t | This cookie is associated with Shopify's analytics suite concerning marketing and referrals. | Statistics | Shopify | 30 minutes |
| _shopify_sa_p | This cookie is associated with Shopify's analytics suite concerning marketing and referrals. | Statistics | Shopify | 30 minutes |
| _shopify_y | Shopify analytics. | Statistics | Shopify | 1 year |
| _y | This cookie is associated with Shopify's analytics suite. | Statistics | Shopify | 1 year |
| _shopify_evids | unknown | Statistics | Not available | unknown |
| _ga | This cookie name is associated with Google Universal Analytics | Statistics | Google Analytics | 2 years |
| _gat | This cookie name is associated with Google Universal Analytics. | Statistics | Google Analytics | 1 minute |
| __atuvc | unknown | Statistics | Not available | unknown |
| __atuvs | unknown | Statistics | Not available | unknown |
| __utma | unknown | Statistics | Not available | unknown |
| customer_auth_provider | This cookie is associated with Shopify's analytics suite. | Statistics | Not available | Session |
| customer_auth_session_created_at | This cookie is associated with Shopify's analytics suite. | Statistics | Not available | Session |
| _shopify_ga | Shopify and Google Analytics. | Statistics | Shopify | Session |
| unique_interaction_id | Shopify analytics. | Statistics | Shopify | 10m |
| _ga_1Q0KJ8SM48 | ID used to identify users | Statistics | Google Analytics | 2 years |
| _ga_2ZKN7RX7NZ | ID used to identify users | Statistics | Google Analytics | 2 years |
| _shopify_analytics | Contains analytics data for buyer surfaces such as the storefront or checkout. | Statistics | Shopify | 1 year |
| _shg_user_id | Statistical measure | Statistics | Shogun | 1 year |
| _shg_session_id | Statistical measure | Statistics | Shogun | 1 year |
| __kla_session | Assists Klaviyo email campaign measurement | Statistics | Klaviyo | 1 year |
| _gads | unknown | Marketing | Not available | unknown |
| IDE | This domain is owned by Doubleclick (Google). The main business activity is: Doubleclick is Googles real time bidding advertising exchange | Marketing | Google DoubleClick | 2 years |
| GPS | This cookie is associated with YouTube which collects user data through videos embedded in websites, which is aggregated with profile data from other Google services in order to display targeted advertising to web visitors across a broad range of their own and other websites. | Marketing | Youtube | Session |
| PREF | This cookie, which may be set by Google or Doubleclick, may be used by advertising partners to build a profile of interests to show relevant ads on other sites. | Marketing | Youtube | 8 months |
| BizoID | This is a Microsoft MSN 1st party cookie to enable user-based content. | Marketing | 1 month | |
| _fbp | Used by Facebook to deliver a series of advertisement products such as real time bidding from third party advertisers. | Marketing | Meta Platforms, Inc. | 3 months |
| _fbc | unknown | Marketing | Not available | unknown |
| __adroll | This cookie is associated with AdRoll | Marketing | Adroll Group | 1 year |
| __adroll_v4 | This cookie is associated with AdRoll | Marketing | Adroll Group | 1 year |
| __adroll_fpc | This cookie is associated with AdRoll | Marketing | Adroll Group | 1 year |
| __ar_v4 | This cookie is associated with AdRoll | Marketing | Adroll Group | 1 year |
| _gcl_au | Used by Google AdSense for experimenting with advertisement efficiency across websites using their services. | Marketing | 3 months | |
| _gid | This cookie name is associated with Google Universal Analytics. | Preferences | Google Analytics | 1 day |
| __cfduid | unknown | Preferences | Not available | unknown |
| _vwo_uuid_v2 | Used to track visitor movements anonymously. | Preferences | Visual Website Optimizer | 1 year |
| _hjSession_3670341 | A cookie that holds the current session data. This ensues that subsequent requests within the session window will be attributed to the same Hotjar session. | Preferences | Hotjar | 30 minutes |
| _hjSessionUser_3670341 | Hotjar cookie that is set when a user first lands on a page with the Hotjar script. It is used to persist the Hotjar User ID, unique to that site on the browser. This ensures that behavior in subsequent visits to the same site will be attributed to the same user ID. | Preferences | Hotjar | 365 days |
Contacting us
Honest Grapes (at the address below) is the data controller for the purpose of the Data Protection Act 1998 (the Act). You have the right to access the information which we hold about you and your right of access can be exercised in accordance with the Act.
We are always pleased to hear from our customers (even if it is a complaint!). We are grateful for any time you spend providing us with the knowledge we need to ensure you are completely satisfied - we want you to return to the site and to recommend us to your friends and family. If you have any questions or feedback about this statement, or if you would like us to stop processing your information, please do not hesitate to contact us.
You can contact us by emailing us at info@honestgrapes.co.uk, call 020 3603 1646 or write to us at:
Data Controller
Honest Grapes
141-157 Acre Lane,
London
SW2 5UA